modsec issues

optize

Well-Known Member
#1
Can someone help me figure out why this modsec rule don't work in Litespeed, but work in Apache?

SecRule REQUEST_FILENAME ".{1,}paypal\.com{1,}" "phase:1,t:none,log,deny"

It's a simple request, to block the request if there is paypal.com anywhere in the URL string.

example: domain.com/hi/paypal.com/file.html or domain.com/hellopaypal.com/

Is there another way I should be doing this via Litespeed?
 
Top